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(54) Method and system for single sign-on user access to multiple web servers 


(57) Methods and systems for single sign-on user 
access to multiple web servers are provided. A user is 
authenticated at a first web server (e.g., by user name 
and password). The first web server provides a web 
page to the user having a service selector (e.g., a hy- 
perlink comprising the URL of a second web server of- 
fering the service indicated by the selector). When the 
user activates the service selector, the first web server 
constructs and transmits an encrypted authentication 


token (e.g., a cookie) from the first web server to a sec- 
ond web server via the user client. The first and second 
web servers share a sub-domain. The authentication to- 
ken comprises an expiration time and is digitally signed 
by the first web server and is authenticated at the sec- 
ond web server. Upon authentication, the second web 
server allows the user to conduct a session at the sec- 
ond web server. 
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